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CROSS-REFERENCE TO RELATED APPLICATIONS 

The present application is a continuation-in-part of U.S. Application No. 
10/434,405, filed on May 8, 2003, which claims the benefit of U.S. Provisional 
Application No. 60/457,391 , filed on March 25, 2003. All of the just mentioned patent 
10 applications are incorporated herein by reference in their entirety. 

COPYRIGHT NOTICE 

A portion of the disclosure of this patent document contains material that is 
subject to copyright protection. The copyright owner has no objection to the facsimile 
1 5 reproduction by anyone of the patent disclosure, as it appears in the Patent and 
Trademark Office patent files or records, but otherwise reserves all copyright rights 
whatsoever. 



BACKGROUND OF THE INVENTION 

20 1. Field Of The Invention 

The present invention relates generally to computer systems, and more 
particularly but not exclusively to methods and associated systems for controlling 
access to computers in a computer network. 

2. Description Of The Background Art 
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Attorney Docket No. 10005.001020 

As is well known, a website may be hosted in a server computer accessible over 
the Internet. A website may include contents such as news, products for sale, on-line 
services, video, audio, and other information. Just like in other media, a website may 
also contain advertisements to cover the cost of operating the website. For example, a 
5 web page provided to a client computer may also include banner advertisements. 

As the quality and sophistication of content offered by websites increase, so does 
the cost of operating the websites. This prompted some websites to control access to 
all or some of their contents. For example, some websites require end-users to provide 
their e-mail address or demographic information before being allowed access to the 
10 website. Provided e-mail address may be used in an advertising campaign, while 

demographic information may be used to tailor advertisements displayed to end-users - 
both of which may help a website attract more advertisers and thereby increase its 
revenue. 

Another way to control access to a website is to charge a subscription fee. End- 
1 5 users who subscribe are given a password that allows them to gain access to the 
website or member-only sections of the website. For example, end-users who 
subscribe may be able to receive streaming video or access an on-line database, 
whereas those who do not may only be allowed access to public sections of the website. 

SUMMARY 

20 The present invention relates to methods and associated systems for controlling 

access to computers in a computer network. The present invention may be used in a 
variety of applications, including controlling access to one or more websites on the 
Internet. 
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In one embodiment, a blocking layer prevents a client computer without a pass 
from accessing a website. The blocking layer may have opaque or transparent portions, 
and may prevent an end-user on the client computer from interacting with the website. 
The pass may comprise a cookie, for example. Depending on implementation, the 
5 client computer may still be provided temporary access to the website to minimize any 
negative effect the blocking layer may have on website traffic. The end-user may also 
be provided an offer to gain permanent access to the website. 

These and other features of the present invention will be readily apparent to 
persons of ordinary skill in the art upon reading the entirety of this disclosure, which 
1 0 includes the accompanying drawings and claims. 

DESCRIPTION OF THE DRAWINGS 

FIG. 1 shows a schematic diagram of a computer network in accordance with an 
embodiment of the present invention. 

FIG. 2 shows a flow diagram schematically illustrating control of access to a 
1 5 computer in a computer network, in accordance with an embodiment of the present 
invention. 

FIG. 3 shows a flow diagram of a method of controlling access to a computer in a 
computer network, in accordance with an embodiment of the present invention. 

FIG. 4 shows a flow diagram of a method of setting an access indicator, in 
20 accordance with an embodiment of the present invention. 

FIG. 5 shows a document being displayed on a window in a client computer. 
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FIG. 6 shows a blocking layer being displayed over the window of FIG. 5, in 
accordance with an embodiment of the present invention. 

FIG. 7 shows a window for displaying an offer to gain regular access to the 
website in accordance with an embodiment of the present invention. 

FIG. 8 shows a window for displaying a message in accordance with an 
embodiment of the present invention. 

FIG. 9 shows a flow diagram of a method of controlling access to a computer on 
a computer network in accordance with an embodiment of the present invention. 

The use of the same reference label in different drawings indicates the same or 
like components. 

DETAILED DESCRIPTION 

In the present disclosure, numerous specific details are provided such as 
examples of apparatus, components, and methods to provide a thorough understanding 
of embodiments of the invention. Persons of ordinary skill in the art will recognize, 
however, that the invention can be practiced without one or more of the specific details. 
In other instances, well-known details are not shown or described to avoid obscuring 
aspects of the invention. 

It is to be noted that although embodiments of the present invention are 
described herein in the context of the Internet, the present invention is not so limited 
and may be used in other data processing applications. 

Referring now to FIG. 1 , there is shown a schematic diagram of a computer 
network 100 in accordance with an embodiment of the present invention. Network 100 
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may include one or more client computers 110, one or more web server computers 102 
(i.e., 102A, 102B,...), one or more message server computers 103, and other computers 
not shown. Intermediate nodes such as gateways, routers, bridges, Internet service 
provider networks, public-switched telephone networks, proxy servers, firewalls, and 
5 other network components are not shown for clarity. In the example of FIG. 1 , network 
100 includes the Internet; however, other types of computer networks may also be used. 
Computers may be coupled to network 100 using any type of connection without 
detracting from the merits of the present invention. 

A client computer 1 10 is typically, but not necessarily, a personal computer such 
10 as those running the Microsoft Windows™, Apple Macintosh™, Linux, or UNIX 

operating systems. An end-user may employ a suitably equipped client computer 110 
to get on network 100 and access computers coupled thereto. For example, a client 
computer 110 may be used to access a content 104 (i.e., 104A, 104B,...) from a web 
server computer 102 if the client computer 1 10 has the appropriate access privileges. 

15 It is to be noted that as used in the present disclosure, the term "computer" 

includes any type of data processing device including personal digital assistants, digital 
telephones, wireless terminals, video game consoles, and the like. It is to be further 
noted that for purposes of the present disclosure, a computer may be a single computer 
or a network of computers. For example, a server computer hosting a website may 

20 comprise a single server computer, or several server computers in communication with 
one another. 

A web server computer 102 may host a website containing information designed 
to attract end-users surfing on the Internet. A web server computer 102 may also 
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include one or more contents 104, such as web pages, downloadable computer 
programs, products available for online purchase, voice, video, audio, wallpapers, on- 
line services, and the other types of information, data, or service accessible over a 
computer network. A web server computer 102 may also be an ad server for delivering 
5 advertisements to a client computer 110. For example, a web server computer 102 may 
serve banner advertisements to a web page received in a client computer 110. 

In the context of the present disclosure, "accessing a website" is the same as 
"accessing the web server computer hosting the website". Thus, a client computer 
having access privileges in a web server computer means that the end-user of that 
10 client computer has access privileges in the website hosted by that web server 
computer. 

A message server computer 103 may include the functionalities of a web server 
computer 102. Additionally, in one embodiment, a message server computer 103 may 
also include downloadable computer programs and files for supporting, updating, or 
15 maintaining components in a client computer 110. Specifically, a message server 
computer 103 may include site information files 1 16 (i.e., 1 16A, 1 16B,...) and 
subscription manager 1 1 4 that may be downloaded to a client computer 1 1 0. Site 
information files 116, subscription manager 114, and other components of a client 
computer 1 10 are further discussed below. 

20 Examples of message server computers that may be adapted to work with 

embodiments of the present invention include those disclosed in the following 
commonly-assigned disclosures, which are incorporated herein by reference in their 
entirety: U.S. Application No. 10/152,204, entitled "METHOD AND APPARATUS FOR 
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DISPLAYING MESSAGES IN COMPUTER SYSTEMS", filed by Scott G. Eagle, David L. 
Goulden, Anthony G. Martin, and Eugene A. Veteska on 5/21/2002; and U.S. 
Application No. 10/289,123, entitled "RESPONDING TO END-USER REQUEST FOR 
INFORMATION IN A COMPUTER NETWORK", filed by Eugene A. Veteska, David L. 
5 Goulden, and Anthony G. Martin on 1 1/05/2002. The just mentioned commonly- 
assigned disclosures are referenced herein as examples and not limitations, as other 
types of server computers may be employed without detracting from the merits of the 
present invention. 

Web server computers 102 and message server computers 103 are typically, but 
10 not necessarily, server computers such as those available from Sun Microsystems, 
Hewlett-Packard, and International Business Machines. A client computer 1 10 may 
communicate with a web server computer 102 or a message server computer 103 using 
client-server protocol. It is to be noted that client-server computing is well known in the 
art and will not be further described here. 

15 FIG. 1 also shows some of the components of a client computer 110 in 

accordance with an embodiment of the present invention. In one embodiment, the 
components of client computer 110 shown in FIG. 1 are implemented in software. It 
should be understood, however, that components in the present disclosure may be 
implemented in hardware, software, or a combination of hardware and software (e.g., 

20 firmware). Software components may be in the form of computer programs comprising 
computer-readable program code stored in a computer-readable storage medium such 
as random access memory (RAM), mass storage device (e.g., local hard disk drive or 
remote hard disk drive accessible over the Internet), or removable storage device (e.g., 
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optical storage device such as a CD-ROM or DVD). For example, a computer-readable 
storage medium may comprise computer-readable program code for performing the 
function of a particular component. Likewise, computer memory may be configured to 
include computer-readable program code for a particular component, which may be 
5 executed by a microprocessor. Components may be implemented separately in 
multiple modules or together in a single module. 

Still referring to FIG. 1, a client computer 1 1 0 may include a web browser 112, a 
subscription manager 114, one or more site information files 116 (i.e., 116A, 116B,...), 
one or more cookies 118 (i.e., 1 18A, 1 18B,...), and one or more items 119 (i.e., 119A, 
10 1 19B,...). Hardware and software components not relevant to the present invention are 
omitted in the interest of clarity. 

Web browser 112 may comprise computer-readable program code for accessing 
contents of a web server computer 102. Web browser 112 enables an end-user to 
browse and navigate over the Internet. Web browser 112 may be a commercially 

1 5 available web browser or web client. In one embodiment, the Microsoft Internet 
Explorer ™ web browser is employed in a client computer 1 10 as web browser 112. 
For purposes of the present disclosure, any computer program that is not generally 
used by an end-user for browsing and navigation is also referred to as a "non-web 
browser" computer program. An example non-web browser computer program includes 

20 subscription manager 114 discussed below. 

Subscription manager 114 may comprise computer-readable program code for 
communicating with message server computer 103. Subscription manager 114 may 
communicate with message server computer 103 over a TCP/IP connection, for 
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example. Subscription manager 114 and message server computer 103 may exchange 
data using conventional client-server protocol. Message server computer 103 may thus 
provide site information files 116 to client computer 110. Similarly, subscription 
manager 1 14 may provide statistical information to message server computer 103. 
5 Examples of statistical information include the addresses (e.g., URL's) of websites 
visited by the end-user and the advertisements the end-user clicked on. It is to be 
noted that the mechanics of monitoring an end-user's browsing activity, such as 
determining where an end-user is navigating to, what an end-user is typing on a web 
page, when an end-user activates a mouse or keyboard, and the like, is, in general, 
10 known in the art and is not further described here. For example, subscription manager 
114 may determine where web browser 1 12 is pointed to by listening for event 
notifications. 

Subscription manager 114 may also comprise computer-readable program code 
for initiating the setting of a cookie 118. Subscription manager 114 may initiate the 

1 5 setting of a cookie 1 18 by having it created if it is not already in client computer 1 10, or 
by having it updated. As will be more apparent below, each web server computer 102 
that has provided client computer 110 with access privileges has a corresponding 
cookie 118. That is, cookie 1 18A may be for indicating access privileges in web server 
computer 102A, cookie 118B may be for indicating access privileges in web server 

20 computer 102B, and so on. Subscription manager 114 may initiate the setting of cookie 
1 18A after client computer 1 10 is provided access privileges in web server computer 
102A. Similarly, subscription manager 1 14 may initiate the setting of cookie 1 18B after 
client computer 1 10 is provided access privileges in web server computer 102B. 
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Subscription manager 114 may initiate the setting of a cookie 118 by sending 
commands to web browser 112. In one embodiment where web browser 112 
comprises the Microsoft Internet Explorer™ web browser, subscription manager 114 
initiates the setting of a cookie 118 using the Winlnet.dll API (application programming 
5 interface) lntemetSetCookie(). In the same embodiment, subscription manager 1 14 
receives the contents of a cookie 1 1 8 from web browser 1 1 2 using the Winlnet.dll API 
lnternetGetCookie(). When setting a cookie 118, subscription manager 114 tells web 
browser 1 12 the website the cookie is for and the expiration date of the cookie. 
Subscription manager 114 may also specify a pass-code expressed as a name-value 

10 pair to be included in a cookie 1 18. A pass-code allows a website to distinguish a 
cookie 118, which as described below may serve as an access indicator, from other 
cookies for that website. The pass-code may also indicate a level of access privilege 
(e.g., basic, premium). Web browser 112 stores a cookie 1 18 in accordance with the 
file naming and location conventions of the specific web browser and operating system 

15 employed in client computer 110. 

A cookie is 1 18 may be set with a relatively short expiration time (e.g., 24 hours) 
so that it will expire if subscription manager 114 does not periodically tell web browser 
1 12 to set it. In one embodiment, subscription manager 114 periodically initiates the 
setting of one or more cookies 1 18 as long as the client computer 110 meets one or 
20 more requirements. An example requirement includes having a site information file 116, 
an item 1 19, or both in client computer 110. Item 119 may be a computer file, a 
computer program, a piece of hardware (e.g., peripheral card plugged in a bus), or other 
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types of computer component. As can be appreciated, an item 119 may be any 
component whose presence is detectable in client computer 110. 

An item 119 may also be a computer program for delivering messages to client 
computer 110. For example, an item 119 may be a computer program for initiating 

* 5 reception of advertisements from message server computer 103 or an ad server on the 
Internet. In essence, client computer 110 may be allowed access to a particular web 
server computer 102 in exchange for the right to deliver advertisements to client 
computer 1 10; revenue from the advertisements may be used to help pay for the cost of 
operating the web server computer 1 02. Example computer programs for delivering 

10 messages to client computer 110 include message delivery programs disclosed in the 
above-referenced commonly-assigned disclosures. These message delivery programs 
are merely provided as examples, as other means for receiving advertisements in client 
computer 1 10 may be employed without detracting from the merits of the present 
invention. 

15 In one embodiment, a cookie 118 serves as an access indicator. That is, a web 

server computer 102 may receive the contents of a cookie 1 18 to determine if client 
computer 110 has access privileges. For example, a web server computer 102 may 
expect a cookie 1 18 to contain a pass-code, such as a name-value pair 
"SitePass=SitepassMgr", before providing access. 

20 It is to be noted that cookies, in general, are known in the art and described in 

the Internet Engineering Task Force (IETF) document RFC 2109. In one embodiment 
of the present invention, setting of cookies 1 1 8 is initiated by subscription manager 1 1 4, 
instead of a web server computer 102. This advantageously allows subscription 
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manager 1 14 to control access to several, different web server computers 102 by 
initiating the setting of corresponding cookies 118 (note that a web server computer 102 
may only initiate the setting of its own cookies, while web browser 1 12 normally does 
not set cookies unless requested). As an economic benefit, this advantageously allows 
5 one business entity (e.g., individual, corporation, etc.), which may be the provider or 
creator of subscription manager 1 14, to promote, manage, and control access to 
several web server computers. That business entity may charge the operators of 
participating web server computers 102 for its services. 

As mentioned, a site information file 1 16 may be downloaded from message 
1 0 server computer 1 03. A site information file 1 1 6 may also be downloaded from a web 
server computer 1 02. In one embodiment, a site information file 1 1 6 is a text file 
containing configuration information for a web server computer 102. In the example of 
FIG. 1, site information file 116A contains configuration information for web server 
computer 102A, site information file 1 16B contains configuration information for web 
1 5 server computer 1 02B, and so on. As a specific example, site information file 1 1 6A may 
have the following configuration information for web server computer 102A: 

"[sitepass] domain=toonland.com FriendlyName=Toonland.com website 
RefreshlntervalHrs=1" 

to indicate that the cookie for the domain name "toonland.com", also known as the 
20 "Toonland.com website", is to be updated every 1 hour. Subscription manager 114 may 
then tell web browser 1 12 to set cookie 1 18A for "toonland.com" with an expiration time 
of at least 1 hour. Subscription manager 114 may then periodically initiate setting of 
cookie 1 1 8A every hour. 

-12- 
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In light of the present disclosure, those of ordinary skill in the art will appreciate 
that using subscription manager 1 14 to control access to web server computers 102 
provides advantages heretofore unrealized. In addition to being able to control access 
to several web server computers, subscription manger 1 14 is also uniquely capable of 
5 determining whether client computer 1 10 is meeting a requirement. Specifically, 
because of security provisions in most web browsers, a typical web server computer 
1 02 is not capable of detecting whether an item 1 1 9 remains in client computer 110. In 
contrast, subscription manager 114, being a client computer program, can determine if 
an item 119 remains in client computer 1 10 by performing a file search, for example. 

10 This ensures that an end-user who is provided access to a website in exchange for the 
promise to retain an item 1 1 9 (which may be an advertisement or a computer program 
for receiving advertisements) in client computer 110 actually does so. Subscription 
manager 114 will not initiate the setting of a corresponding cookie 1 18 if it detects that 
the required item 1 19 is no longer in client computer 110, thereby causing cookie 1 18 to 

1 5 expire and revoking the end-user's access privileges in the website. 

In one embodiment, subscription manager 114 has its own program group, 
uninstall, and icon in client computer 110. This readily allows an end-user to find where 
subscription manager 1 14 is located and, if necessary, use the uninstall to remove 
subscription manager 114 and associated files, such as site information files 116. 
20 Preferably, the end-user is provided the option to uninstall individual site information 
files 116, to be able to cancel membership in specific websites. Program groups, 
uninstalls, and icons are well known components of client computers running the 
Microsoft Windows™ operating system. 

-13- 
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FIG. 2 shows a flow diagram schematically illustrating control of access to a 
computer in a computer network, in accordance with an embodiment of the present 
invention. As indicated by arrows 201 and 202, subscription manager 114 reads site 
information files 116 available in client computer 1 10 to determine how to configure 
5 cookies 118. Thereafter, subscription manager 114 detects for the presence of item 
1 1 9A, item 1 1 9B, or both in client computer 1 1 0 (see arrows 203 and 204). In this 
example, the presence of item 1 19A, item 1 19B, or both is a requirement for accessing 
all or certain sections of web server computer 102A. The requirement for accessing a 
web server computer 102 may be obtained from a corresponding site information file 
10 116. For example, the requirement to have item 1 1 9A to access web server computer 
102A may be stored in site information file 1 16A. 

Subscription manager 114 tells web browser 112 (see arrow 205) to set cookies 
118 based on configuration information obtained from corresponding site information 
files 116. Cookie 1 18A is set (see arrow 206) in accordance with configuration 

15 information obtained from site information file 1 16A, cookie 1 18B is set (see arrow 207) 
in accordance with configuration information obtained from site information file 1 16B, 
and so on. In this example, subscription manager 114 initiates the updating of cookie 
1 18A every hour to prevent it from expiring. When web browser 112 sends an access 
request to web server computer 102A (see arrow 208), web browser 112 uploads the 

20 contents of all cookies intended for web server computer 102A along with the access 
request. The uploaded contents include those of cookie 1 18A, which web server 
computer 102A examines to determine if client computer 110 has any access privileges. 
Based on the contents of cookie 118A, web server computer 102A provides a response 
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(see arrow 209) to client computer 110. The response may include a web page, a multi- 
media file, access to an on-line database, streaming video, a voice-over-IP connection, 
etc. 

A web server computer 102 may restrict access to all sections or certain sections 
of the web server computer 1 02. For example, web server computer 1 02A may host a 
website that only allows access to end-users with access privileges. The website may 
also have public sections and member-only sections. The public sections may provide 
"basic services" such as capability to view web pages that contain general information, 
while the member-only sections may provide "premium services" such as capability to 
view streaming video, listen to MP3 music, or view web pages containing special 
information (e.g., stock market tips). Cookie 1 18A may indicate the kind of service a 
client computer 110 (and hence the end-user) is authorized to access. 

As indicated by arrow 210, advertisements may be delivered in client computer 
1 10 so long as it retains access privileges in web server computer 102A, web server 
computer 102B, or both. The advertisements may be incorporated in web pages 
provided by web server computer 102A. In the example of FIG. 2, the requirement for 
allowing access to web server computer 102A includes retaining item 119A, which may 
be a client computer program for receiving advertisements from an ad server (not 
necessarily web server computer 102A) over the Internet. However, the requirement 
may also simply be keeping subscription manager 1 14, site information file 1 16A, or 
both in client computer 110. 

FIG. 3 shows a flow diagram of a method 300 for controlling access to a 
computer in a computer network, in accordance with an embodiment of the present 
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invention. Method 300 describes the steps performed by a web server computer. As 
can be appreciated, method 300 may also be re-written to describe the steps performed 
by a client computer. For example, web server computer steps that recite "receiving" 
may be re-written to recite "sending" to describe corresponding steps performed by a 
5 client computer. 

Starting in step 302, a web server computer receives an access request from a 
client computer. The access request may be a request to download a document, such 
as a web page or a file, or access a service, for example. In step 304, the web server 
computer determines if a cookie serving as an access indicator has been received from 

10 the client computer. Not receiving a cookie from the client computer indicates that the 
end-user of the client computer is not a registered member, and is thus not authorized 
to access all or certain sections of the website hosted by the web server computer. In 
that case, the end-user is given the opportunity to become a member of the website. To 
become a member, the end-user may have to explicitly agree to a license agreement 

15 requiring the end-user to keep certain items in the client computer, to receive 

advertisements from various sources, or both. For example, the end-user may be 
required to click on a license agreement to explicitly agree to receive advertisements in 
exchange for access privileges. Making the end-user explicitly agree to receive 
advertisements (as opposed to just displaying advertisements to the end-user) 

20 advantageously helps prevent confusion as to the source of advertisements, and also 
helps ensure that the end-user understands the conditions for having access privileges 
in the website. 



-16- 



Attorney Docket No. 10005.001020 

Note that in the context of the present disclosure, "receiving a cookie" is the 
same as receiving the contents of the cookie. That is, a web server computer does not 
necessarily have to receive a file comprising a cookie. 

In steps 306 and 308, the client computer is denied access to the web server 
5 computer (or sections of the web server computer) if the end-user does not want to 
become a member. In steps 306, 310, and 312, a subscription manager is downloaded 
to the client computer along with a site information file for the web server computer if the 
end-user agrees to become a member. 

Continuing in step 314, the web server computer examines the contents of the 
10 cookie to determine if the client computer has access privileges. A cookie not 

containing expected information (e.g., missing a pass-code, such as "SitePassMgr") 
indicates that the cookie is not authentic, or is not for purposes of gaining access to the 
web server computer. In that case, the end-user may be asked to sign up for 
membership to receive a subscription manager and a site information file, as indicated 
15 in steps 320, 324, and 326. In steps 320 and 322, the client computer is denied access 
if the end-user does not want to become a member. 

In steps 316 and 318, the client computer is allowed access to the web server 
computer commensurate with the client computer's access privileges. 

In method 300, the site information file is obtained from the web server computer 
20 after the end-user signs up for membership. It is to be noted, however, that site 

information files may also be obtained from a message server computer or another web 
server computer. For example, referring back to FIG. 1 , the end-user of client computer 
110 may download subscription manager 114 and site information file 1 16B from 
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message server computer 103 to gain access to a website hosted by web server 
computer 102B. Thereafter, the end-user may gain access privileges in a website 
hosted by web server computer 102A by downloading site information file 1 16A from 
message server computer 103 without having to download another subscription 
5 manager 114. As can be appreciated, once subscription manager 1 14 is downloaded to 
client computer 110, the end-user merely has to download additional site information 
files 116 to obtain access privileges in other websites. 

FIG. 4 shows a flow diagram of a method 400 for setting an access indicator, in 
accordance with an embodiment of the present invention. In embodiments disclosed 

10 herein, cookies are employed as access indicators. As can be appreciated by those of 
ordinary skill in the art reading the present disclosure, however, other types of files or 
mechanisms for holding data may also be employed in lieu of cookies. Starting in step 
402, a subscription manager finds a site information file and, optionally, one or more 
required items in a client computer. In steps 404 and 406, a cookie serving as an 

1 5 access indicator for accessing a web server computer is not set if a corresponding site 
information file and the required item are not found in the client computer. Not setting a 
cookie may include not creating a cookie if it does not exist in the first place, or not 
updating a pre-existing cookie. Otherwise, as indicated in steps 404 and 408, a cookie 
is set based on configuration information contained in the site information file. Setting a 

20 cookie may include creating a cookie if it does not exist, or updating a pre-existing 
cookie. In one embodiment, a cookie is set by having a client program (e.g., 
subscription manager 114) request a web browser to do so. 
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Other techniques for controlling access to computers in a computer network are 
now described beginning with FIG. 5. The following embodiments are described using 
websites on the Internet as examples, not limitations. 

FIG. 5 shows a document displayed on a window in a client computer. In the 
5 example of FIG. 5, the document is a web page 501 while the window is that of a web 
browser 112 (see also FIG. 1 ). Web page 501 may be one of several from a website on 
the Internet. An end-user on client computer 110 (see FIG. 1) may receive web page 
501 by pointing web browser 1 1 2 to the website. In the example of FIG. 5, the website 
provides a forum on the Internet. As can be appreciated, embodiments of the present 
10 invention may also be employed with other types of websites without detracting from the 
merits of the present invention. 

FIG. 6 shows a blocking layer 610 being displayed over web page 501, in 
accordance with an embodiment of the present invention. Blocking layer 610 prevents 
the end-user from interacting with the web site. For example, blocking layer 610 

15 prevents the end-user from clicking on any portion of web page 501 . Note that blocking 
layer 610 may have opaque and transparent portions. In the example of FIG. 6, the 
opaque portions of blocking layer 610 are those that cover web page 501, while the 
transparent portions are those over the still visible portions of web page 501 . In one 
embodiment, blocking layer 610 is overlaid on web page 501 in memory. An example 

20 pseudo code for creating a blocking layer 610 is shown in Table 1 . 

TABLE 1 

Create a DIV (aka HTML Layer), fill the DIV with desired content, 
append the DIV to the document, and position the DIV within the 
browser window over the viewable web site content. 



function blockPage ( ) { 
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wait for document to fully load; 

layer = document- >cr eat eObject( DIV ); 

layer- >content = HTML for desired content; 

document- >appendObj ect ( layer ); 

layer- >resize ( browserWindow->size ) ; 

layer- >position( atop current browser content ); 

} 



Blocking layer 610 may intercept end-user interaction with visible and non-visible 
10 portion of web page 501 to prevent the end-user from accessing web page 501 or other 
documents on the website. 

In one embodiment, blocking layer 610 is displayed on client computers 110 that 
do not have authorization to access the website. Such authorization may be in the form 
of a pass, such as a cookie containing a pass-code, for example. In the example, of 
15 FIG. 6, client computer 110 does not have a pass to access the website. Blocking layer 
610 may advantageously include provisions and instructions for gaining access to the 
website. 

FIG. 7 shows a window 710 for displaying an offer to gain regular access to the 
website in accordance with an embodiment of the present invention. Window 710 may 
20 be displayed over blocking layer 610 a few seconds after blocking layer 610 is displayed. 
In the example of FIG. 7, window 710 comprises a security prompt that is also known as 
a Verisign™ prompt. Window 710 may be displayed using a browser plug-in, for 
example. Window 710 may include a YES button 712, which the end-user may click on 
to accept the offer. The end-user may click on a NO button 714 to decline the offer. 

25 FIG. 8 shows a window 720 for displaying a message in accordance with an 

embodiment of the present invention. Window 720 is displayed when the end-user 
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clicks on the NO button 714 of FIG. 7. In the example of FIG. 8, window 720 indicates 
that the end-user may still gain temporary access to the website. However, that 
temporary access may be revoked in the future. In essence, the end-user is provided a 
free trial visit in the hopes that the end-user may like the website and later decide to 
5 receive a regular pass in exchange for receiving advertisements. This also minimizes 
any negative effect the access control may have on the website's traffic. 

FIG. 9 shows a flow diagram of a method 900 of controlling access to a computer 
in a computer network in accordance with an embodiment of the present invention. In 
one embodiment, method 900 is implemented in software. As can be appreciated 
10 method 900 may also be implemented in hardware or combination of hardware and 
software (e.g., firmware), depending on the application. In one embodiment, method 
900 comprises a web server filter code 960, a message server screening code 970, and 
a blocker code 980. 

Filter code 960 may comprise computer-readable program code for determining 
15 whether to set up a blocking layer (e.g., blocking layer 610) on a website. In one 

embodiment, filter code 960 is stored on the web server computer (e.g., a web server 
computer 102 shown in FIG. 1) hosting the website. A web page of the web site may 
include a reference to filter code 960. When the web page is received in a client 
computer (e.g., a client computer 110 shown in FIG. 1), the reference is executed in the 
20 client computer to pull filter code 960 from the web server computer to the client 

computer. In the client computer, filter code 960 performs a series of tests to determine 
whether or not to block the client computer from accessing the website. If filter code 
960 determines that the client computer may need to be blocked, filter code 960 may 
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request a message server computer for blocker code 980. In the example of FIG. 9, 
steps 904, 906, 908, 910, and 912 may be performed by filter code 960. An example 
filter code 960 implemented in the JavaScript programming language is shown in 
Appendix A of this disclosure. 

5 Message server screening code 970 may comprise computer-readable program 

code for determining if the client computer is suitable to receive blocker code 980. 
Screening code 970 may reside in and be executed by a message server computer 
(e.g., message server computer 103 shown in FIG. 1). Upon receipt of a request for 
blocker code 980, screening code 970 may first perform a series of tests to determine if 

10 blocker code 980 is compatible with the client computer. The results of the tests may 
be based on information received from the client computer. For example, HTTP 
headers received from the client computer may allow screening code 970 to determine 
the operating system and type of web browser of the client computer. In one 
embodiment, the client computer is not blocked if it is not suitable to receive and run 

1 5 blocker code 980. This advantageously prevents improper operation of the blocker 
code in the client computer. It is to be noted that depending on the application, the 
client computer may also be blocked if it is not suitable to receive blocker code 980. In 
that case, access to the website is limited to client computers that are compatible with 
blocker code 980 and have a pass. In the example of FIG. 9, steps 914, 916, 918, 920, 

20 and 922 may be performed by screening code 970. 

Blocker code 980 may comprise computer-readable program code for controlling 
access to the website. Blocker code 980 may reside in a message server computer. 
Depending on the results of the tests performed by screening code 970, the message 
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server computer may provide blocker code 980 to the client computer. Blocker code 
980 is then executed by the client computer. In one embodiment, blocker code 980 
blocks access to the website if the client computer does not have a regular or temporary 
pass to access the website. Blocker code 980 may also provide the end-user an offer 
5 to gain access to the website in the event the client computer does not have a pass to 
the website. In the example of FIG. 9, steps 926, 928, 930, 932, 934, 936, and 938 may 
be performed by blocker code 980. An example blocker code 980 implemented in the 
JavaScript programming language is shown in Appendix B of this disclosure. 

Method 900 begins in step 902 when the client computer submits a request for 
1 0 content to the web server computer hosting the website. The request for content in this 
example is for a web page. In response to the request, the web server computer may 
provide the web page to the client computer. That web page may include a reference to 
filter code 960, which may be stored in the web server computer. When the computer- 
readable program code (e.g., HTML) of the web page is executed at the client computer, 
1 5 the reference is also executed and thereby pulls filter code 960 to the client computer. 
Filter code 960 is then executed by the client computer. 

In steps 904 and 906, filter code 960 searches the client computer for a 
temporary or regular pass for accessing the website. In one embodiment, the 
temporary or regular pass comprises a cookie. In that case, filter code 960 
20 communicates with the web browser in the client computer to locate and read the 

contents of the cookie, if any. The client computer is allowed to access the website if it 
has a temporary or a regular pass, as indicated in the paths from step 904 to step 924 
and from step 906 to step 924. Otherwise, in step 908, a "lottery" is run to randomly 
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determine if the client computer is to be provided access to the website even without 
any pass. The lottery may be implemented using a random number generator, for 
example. Randomly determining if the client computer is to be allowed access even 
without a pass minimizes any negative effect the access control may have on website 
5 traffic. This is especially advantageous in situations where the website is fairly new or 
has not generated enough traffic to warrant full restricted access. As can be 
appreciated, running such a lottery is optional. 

Going through the path from step 910 to step 912, the client computer is provided 
a temporary pass to access the website if the result of the lottery so indicates. 
1 0 Otherwise, filter code 960 initiates blocking of the client computer by requesting the 
message server for a blocker code. 

Going through the path from step 910 to step 914, the message server executes 
screening code 970 to determine if the client computer is suitable to receive the blocker 
code. In step 914, screening code 970 determines if cookies are enabled in the client 

15 computer. In one embodiment, step 914 is performed in the message server by 

attempting to write a cookie in the client computer. If the writing of the cookie fails, this 
would indicate that the client computer does not accept cookies. In embodiments where 
a cookie is employed as a pass to the website, blocker code 980 may not properly work 
in the client computer. Accordingly, in the path from step 914 to step 924, the website is 

20 not blocked if cookies are not enabled in the client computer. 

In step 916, screening code 970 determines if the client computer is running an 
operating system that is compatible with blocker code 980. If so, screening code 970 
continues to step 918. Otherwise, the website is not blocked. 
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In step 918, screening code 970 determines if the web browser in the client 
computer is the correct browser type (e.g., brand of web browser) for blocker code 980. 
For example, in one embodiment, the website is not blocked if the web browser is not 
the Microsoft Internet Explorer™ web browser. In step 920, screening code 970 
5 determines if the web browser is a version supported by blocker code 980. In one 
embodiment, the website is not blocked if the web browser is either the wrong type or 
the wrong version, as indicated in the paths from step 918 to step 924 and from step 
920 to step 924. Note that the operating system, browser type, and browser version of 
the client computer may be determined from a packet header (e.g., HTTP header) 
1 0 received from the client computer when the client computer requested for a blocker 
code. 

In step 922, screening code 970 determines if the number of blocked client 
computers has exceeded a predetermined threshold number. The threshold number 
may correspond to the number of client computers that may be blocked from accessing 

15 the website within a given period of time. This advantageously prevents excessive 

blocking of website traffic. Step 922 may be performed by counting the number of times 
blocker code 980 has been downloaded to client computers. If the number of client 
computers blocked form accessing the website is equal to or exceeds the threshold, 
then the client computer is provided access to the website, as indicated in the path from 

20 step 922 to step 924. Otherwise, blocker code 980 is provided to and executed in the 
client computer. 

In step 926, blocker code 980 sets a blocking layer (e.g. blocking layer 610 
shown in FIG. 6) over the website. The blocking layer serves as a barrier for preventing 
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the end-user from interacting with the website. For example, the blocking layer may 
prevent the end-user from actuating (e.g., clicking with a mouse) the links of a web page 
of the website. 

In step 928, blocker code 980 provides the end-user an offer to gain regular 
5 access to the website. The offer may be displayed on a window (e.g., see window 710 
shown in FIG. 7) having buttons for accepting or declining the offer. If the end-user 
accepts the offer, another window acknowledging the acceptance may be displayed to 
the end-user as indicated in step 930. Accordingly, blocker code 980 initiates 
installation of a regular pass in the client computer and removal of the blocking layer, as 
10 indicated in steps 932 and 934. 

If the end-user does not accept the offer, another window (e.g., window 720 
shown in FIG. 8) acknowledging the non-acceptance may be displayed to the end-user 
as indicated in step 936. In step 938, the client computer is provided a temporary pass 
to access the website even when the offer is declined. In that case, the blocking layer is 
1 5 removed to allow the client computer to access the website as indicated in the path from 
step 938 to step 934. Depending on the application, the client computer may also be 
prevented from accessing the website if the end-user declines the offer. 

In one embodiment, blocker code 980 initiates installation of a temporary pass by 
pulling an authorization web page from the web server computer hosting the website. 
20 The authorization web page may comprise-computer readable program code for setting 
a cookie that serves as a temporary pass. The temporary pass cookie is created when 
the authorization web page is received in the client computer. An example authorization 
web page implemented in HTML is shown in Appendix C. 
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While specific embodiments of the present invention have been provided, it is to 
be understood that these embodiments are for illustration purposes and not limiting. 
Many additional embodiments will be apparent to persons of ordinary skill in the art 
reading this disclosure. 
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APPENDIX A 



Copyright 2004, Claria Corporation 

var pepass_access = false; 

5 var pepass_accessWait = 2500; 

var pepass_accessCk = pepass_getCookie ( "sp_temp" ); 
var pepass_sitepassCk = pepas s_get Cookie ( "sitepass" ); 
var pepass_siteAccess = document . createElement ( "script" ); 

10 function pepass_getCookie ( name ){ 

var index = document . cookie . indexOf ( name + " = " ); 
if ( index == -1 ) { 
return false; 

} 

15 index = document . cookie . indexOf ( " = ", index ) + 1; 

var endstr = document . cookie . indexOf ( ";", index ); 
if ( endstr == -1 ) { 

endstr = document . cookie . length; 

} 

20 return unescape ( document. cookie. subs tring( index, 

endstr ) ) ; 

} 

function pepass_sendEvent ( reason ) { 

var cb = Math. floor ( 999999999999 * Math . random ( ) ); 
25 var qs = 

" &did=&pid=4 04 &wuid=&event = 7 003 &reason= 11 +reason ; 
var pixSrc = 

"http : //webpdp . gator . com/4 /common/pixel .php? "+cb+qs ; 
var event Img = new Image; 
30 eventlmg.src = pixSrc; 

} 

function pepass_setCookie ( value, seconds ){ 
var expiry = 1000 * seconds; 
var expDate = new Date ( ) ; 
35 expDate.setTime(expDate.getTime() + expiry); 

document . cookie = "sp_temp=" + escape (value) + " ; 
expires=" + expDate . toGMTString ( ) + "; path=/; 
domain=network54 . com" ; 

return ( document . cookie . indexOf ( " sp_temp " ) ) ; 

40 } 

function pepass_launchPlacementHelper ( ) { 

if( document. cookie. indexOf ("sp_temp") ==-!){ 
pepass_access = true; 
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pepass_sendEvent ( 7514 ); 
return; 

} 

if( !pepass_access ){ 
5 pepass_siteAccess . setAttribute ( "src" , 

"http: //webpdp. gator. com/4/placement/404/ " ); 

pepass_launchPlacement () ; 

} 

} 

10 function pepass_launchPlacement ( ) { 

try { 

document . body . insertBef ore ( pepass_siteAccess , 
document .body . firstChild ) ; 

} catch ( e ) { 

15 setTimeout ( f, pepass_launchPlacement ( ) " , 500 ) ; 

} . . 

} 

if ( pepass_accessCk ) { 
20 switch ( pepass_accessCk ){ 

case "vsy" : 

pepass__sendEvent ( 7511 ) ; 
pepass_access = true; 
break ; 

25 case "pend" : 

pepass_sendEvent ( 7515 ); 

pepass_access = true; 

break; 
case ll pend2 n : 
30 pepass_sendEvent ( 7516 ); 

pepass_access = true; 

break; 
default : 

pepass_access = true; 

35 } 

} else if( pepass_sitepassCk ){ 

pepass_access = true; 

pepass_sendEvent ( 7512 ); 
} else { 

40 var pepass_draw = Math. floor ( 1000000 * Math. random ( ) ); 

if( pepass_draw >= 1000000 ){ 
pepass_access = true; 
pepass_setCookie ( "lot" , 43200) ; 

} 

45 } 
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if( !pepass_access ) 

pepass_setCookie ( "pend" , 1296000 ); 
setTimeout ( "pepass_launchPlacementHelper ( 
pepass_accessWait ) ; 
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APPENDIX B 
Copyright 2004, Claria Corporation 

5 II--- INITIALIZE SOME GLOBALS 

var ie5 = (document .all && document .getElementByld) ; 

var ns6 = (! document . all && document . getElementByld) ; 

var opac = 0; 

var bye = false; 

10 var accessCkName = "sp_temp"; 

var divl = null; 

var gt_off = null; 

var el =0; 

// 

15 

// --- CONFIGURABLES 

var maxOpac = 100; // [0-100, by 10] ; 
var incOpac = Math. ceil ( maxOpac/3 ); 
var divBgcolor = null; // null, or any HEX RGB value 
20 var popoffLoc 

"http: //webpdp. gator. com//4/message/336/webpdp_j)lugin. php?q=cD0zO 
TImZ Ww9MCZ 3 PVA3 dkdIUX 1 3 QnBnQUFBTHdnc FEmc j 03NTAx" ; 
// _____ 

25 function epass_sendEvent ( event, reason ){ 

var cb = Math.floor( 999999999999 * Math . random ( ) ); 
var qs = 

11 &did=&pid=3 92 &wuid=P7vGHQr7BpgAAALwgpQ&event= 11 +event+ 11 &reason= " + 
reason; 
30 var pixSrc = 

"http : //webpdp . gator . com/4 /common/pixel . php? " +cb+qs ; 

var event Img = new Image; 

eventlmg.src = pixSrc; 

} 

35 

function epass_doHD() { 

var pos_left = (screen. avai 1 Width / 2) - 50; 
var pos_top = (screen. avai lHeight) + 10; 
gt_off = window. open (popoffLoc, 
40 • gt_of f ' , ' width=100 , height=100 , lef t= ' +pos_lef t+ » , top= • +pos top) ; 
} 

function epass_f adeln ( ) { 
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opac = maxOpac; 
if(ie5) 

document . getElementByld ( 1 epass_banner 1 ) . filters . alpha . opacity = 
opac ; 
5 else if(ns6) 

document . getElementByld ( 1 epass_banner ' ) .style. MozOpacity = 
opac/100; 

epass_doHD ( ) ; 

setTimeout( "epass_alert ( ) " , 40000 ); 

10 } 

function epass_alert ( ) { 

var alertLayer = epass_GetElement ( 1 epass_alert 1 ) ; 
if ( alertLayer ) { 
15 alertLayer . style. visibility = 'visible 1 ; 

alertLayer . style. zlndex = 100; 

} 

} 

20 function epass_siteBolt ( ) { 

if( document . body == null |j typeof ( document . body ) != 
"object" ) { 

setTimeout ( "epass_siteBolt ( ) " , 500 ) ; 
} else { 

25 epass_setCookie ( accessCkName, "pend", 180 ); 

divl = 

epass__Div ( ' epass_banner 1 ,0 ,0 , epass__WindowGetInnerWidth ( ) , epass_Wi 
ndowGetlnnerHeightO ^ivBgcolor) ; 

document . body. insertBef ore ( divl , document . body. lastChild ) ; 
30 setTimeout ( "epass_fadeln( ) " , 2500 ); 

epass_DOHelper ( ) ; 

} 

} 

35 var DOHelp = 0; 

function epass_DOHelper() { 
if( bye ){ 

epass_byeLayer ( ) ; 
} else { 

40 epass_detectCookie ( accessCkName ) ; 

DOHelp++; 

setTimeout ( "epass_DOHelper ( ) " , 1000 ); 

} 

} 

45 
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function epass_bye Layer ( ) { 

document .body . removeChi Id (epass_GetElement ( 1 epass_banner ' ) ) ; 
return ( false ) ; 

} 

5 

function epass_detectCookie ( name ) { 

if ( epass_getCookie ( name ) && epass_getCookie ( name ) != 
"pend" ) { 

bye = true; 

10 } 

} 

function epass__getCookie ( name ){ 

var index = document . cookie . indexOf ( name + " = " ); 
15 if ( index == -1 ) { 
return false; 

} 

index = document . cookie . indexOf ( " = " # index ) + 1 ; 
var endstr = document . cookie . indexOf ( 11 ; " , index ) ; 
20 if ( endstr == -1 ) { 

endstr = document . cookie . length; 

} 

return unescape( document .cookie. substring ( index, endstr ) ) ; 



25 



} 



function epass_setCookie ( name, value, seconds ){ 
var expiry = 1000 * seconds; 
var expDate = new Date ( ) ; 

expDate . setTime (expDate . getTime ( ) + expiry) ; 
30 document . cookie = name+ " = 11 +escape (value) + 11 ; 

expires = "+expDate . toGMTString ( ) +" ; path=/ ; domain=network54 . com" ; 

} 

function epass_Div( name, x, y, w, h, col ) { 
35 var layer = document . createElement ( "DIV" ) ; 

layer. id = name; 

layer. style. posit ion = "absolute" ; 

layer . style. left = x + "px" ; 

layer . style. top = y + "px"; 

40 layer . style. width = w + "px"; 

layer . style. height = h + "px" ; 

layer . style. filter = "alpha (opacity=0) "; 

layer . style. backgroundColor = col; 

layer . style . backgroundlmage = 
45 "URL (http : //webpdp . gator . com/l/common/pixel . gif ) " ; 
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layer, style, z Index = 11 1" ; 

layer . style, visibility = "visible 11 

layer . style. padding = "Opx Opx Opx Opx"; 

layer . innerHTML = 1 <table border=\"0\" 

5 cellpadding=\"0\" cellspacing=\"0\" width=\ "100%\" 

height=\"100%\"> <tr> <td align=\"ceriter\" valign=\"middle\"> 

<!-- Start Header Graphic --> < table border=\"0\" 
cellpadding=\"0\" cellspacing=\"0\"> <tr> <td> <table 
border =\ 11 3\" cellpadding=\"0\" cellspacing=\"0\" width=\"750\"> 
10 <tr> <td width=\"750\"> <img 

src=\ "http://webpdp.gator.eom/4/message/336/lp/network54_header_l 
02903. gif\" width=\"750\" height=\ " 90\ " alt=\ "Network54 
EntryPass\" border=\"0\"x/td> </tr> <!-- End Header Graphic --> 
<!-- Start Main Content --> <tr bgcolor=\"#FFFFFF\"> <td 
15 colspan=\"2\"> <table border=\"0\" cellpadding=\"0\" 

cellspacing=\"0\" width=\"750\" bgcolor=\"#FFFFFF\"> <tr> <td 
width= \ " 1 0 \ " >< img 

src=\ "http : //webpdp . gator . com/4/message/33 6/lp/spacer . gif \ " 
width=\"10\" height=\"l\" border=\"0\" alt=\"\"x/td> <td 

20 width=\"740\"> <table border=\"0\" cellpadding=\"0\" 

cellspacing=\"0\" width=\"740\" bgcolor=\"#FFFFFF\"> <tr> <td 
colspan=\"2\"> <p style=\" line-height : 90%; padding-top : 10px ; 

font- family rarial; font-size : 14pt ; font-weight : 800 ; 
color: 003063\">For FREE access to this site: <ol style=\"line- 

25 height: 95%; padding- top : 1 Opx ; font - family :arial; f ont-size : 12pt ; 
font -weight : 8 00; color : 003063\"> <li>Wait 30 seconds and 

click VyesV to accept our agreements to install your FREE 
Network54 Entrypass, which gives you unrestricted access to this 
site, or<brxbrx/li> <li>Wait 30 seconds and click 

30 \'no\' for temporary access. Without Network54 Entrypass, 

sometime in the future this site will be blocked by this page and 
you may be denied site access. </li> </ol> </p> </td> </tr> 

<tr> <td valign=\"top\" rowspan=\"2\"> <img 

src=\ "http: //webpdp. gator . com/4/message/336/lp/verisign. gif \" 
35 width=\"230\" height=\"190\" alt=\"\" border=\"0\" 

usemap=\"#vslink\"x/td> <td bgcolor=\"#EEEEFF\"> <div 
style=\ "line-height : 90%; padding - top : 5px; padding -bottom: 5px; 
f ont- family : arial ; f ont-size : 12pt ; font -weight : 800 ; 
color: 000000\"> &nbsp ; &nbsp ; Free access to Network54 with 
40 Network54 EntryPass </div> </td> </tr> <tr> <td 

valign=\"top\"> <div style=\ "padding- top : 5px\"> < table 
border=\"0\" cellpadding=\"0\" cellspacing=\"0\" width=\"490\"> 
<tr> <td valign=\"top\" width=\"20\" align=\"center\"> <div 

style=\" font- family :arial; f ont-size : 24 ; f ont- width: bold; 
45 color: FE0402\">&#149;</divx/td> <td valign=\"top\" 

-34- 



Attorney Docket No. 1 0005.001 020 
width=\ ,f 5\ n > <img 

src=\ "http : //webpdp . gator . com/4 /message/3 3 6/ lp/spacer . gif \ " 
width=\"5\" height=\"l\" border =\"0\" alt=\"\"x/td> <td. 
valign=\"top\"> <div style=\ 11 font-family :arial; f ont-size : 12 ; 

5 padding- top : 5px; color : 00 0000 \"> The page you requested is 

part of Network54, a free advertising supported network of forums, 
chat rooms, blogs, and more! </divx/td> </tr> <tr> <td 
col span= \ " 3 \ 11 he ight =\ n 10\ n >< img 

src=\ "http : //webpdp . gator . com/ 4 /message/3 3 6/ lp/spacer . gif \ " 
10 width=\"l\»' height=\"10\" border=\"0\" alt=\"\»x/td> </tr> 

<tr> <td valign=\"top\" width=\"20\" align=\"center\"> <div 

style=\ 11 font- family rarial; font -size: 24 ; f ont- width: bold; 

color : FE0402\ " >&#149 ; </div>< / td> <td valign=\ " top\ 11 

width=\"5\"> <img 
15 src=\"http: //webpdp. gator. com/4 /message/336/lp/spacer . gif \" 

width=\"5\" height =\"1\" border=\"0\" alt=\"\"x/td> <td 

valign=\"top\"> <div style=\" font -family :arial; font-size : 12 ; 

padding- top : 5px; color : 000000\"> The Network54 EntryPass is 

supported by advertising from the GAIN Network - so you\ ! ll get 
20 unrestricted access to Network54\ , s free content in exchange for 

occasionally receiving <a style=\"color : OOOOf f \" 

href =\ "http : //www . gainpublishing . com/ about /\ " 

target=\"_blank\">popup ads</a> from the GAIN Network while you 
surf the web. </divx/td> </tr> <tr> <td colspan=\"3\" 

25 he i ght = \ " 1 0 \ » >< img 

s rc = \ 11 ht tp : / / webpdp . gator . com/ 4 /mes sage/ 3 3 6 / lp/ spacer . gi f \ " 
width=\"l\" height=\"10\" border=\"0\" alt=\"\"x/td> </tr> 
<tr> <td valign=\"top\ ,! width=\"20\" align=\ ll center\"> <div 

s tyle = \ " font - f ami ly : ar ial ; font - s i ze : 2 4 ; font - width : bold ; 

30 color:FE0402\">&#149;</divx/td> <td valign=\" top\" 

width=\"5\"> <img 

src=\ "http : //webpdp . gator . com/4/message/336/lp/spacer . gif \ " 
width=\"5\" height=\"l\" border=\"0\" alt=\"\"x/td> <td 
valign=\ ll top\"> <div style=\ 11 font- family :arial; font-size : 12 ; 

35 padding-top:5px; color : 000000\"> The GAIN Network displays 

ads based on your online surfing behavior, and they always 
contain GAIN branding so you\ f ll know theyVre delivered by the 
GAIN Network, not by any website . </divx/td> </tr> 
</tablex/divx/td> </tr> <tr> <td> <img 

40 src=\ "http : //webpdp . gator . com/4/message/336/lp/spacer . gif \ " 
width=\"l\" height=\"l\" border=\"0\" alt=\"\"x/td> </tr> 
</table> <table width=\"720\" border=\"0\" cellspacing=\"0\" 
cellpadding=\"0\"> <tr> <td valign=\"top\" align=\"lef t\"> 
<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\" 

45 width=\"100%\"> <tr> <td align=\"lef t\"xfont face=\"arial\" 
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size=\ l, 3\ ,, xb><a style=\ "color : OOOOf f \" 

href =\"http: //www. gainpublishing.com/help/app _jprivacy/app_privacy 
-51.html\" target=\ n _blank\">Privacy Statement & End User License 
Agreement</ax/b></fontx/td> <td align=\ l, right\ ,l ><a 
5 href =\ "http : //www . entrypass . com\ 11 style=\ " font- family : arial ; 
font-size: 12 ; font-weight :bold; color : OOOOf f\" 

target=\ "_blank\ " >About EntryPass<sup style=\ " font- family : arial ; 
font-size: 8\">TM</sup></a></td> </tr> </table> </td> </tr> 
</table> </td> </tr> </table> <!-- End Main Content --> 
10 </td> </tr> </table> <map name=\ l! vslink\" > <area 

shape=\"rect\" coords=\"55 , 72 , 170, 121\" href=\"#\" 
onClick=\" javascript :epass_doHD() ;\"> </map> 1 ; 
return layer; 

} 

function epass_GetElement ( o ) { 

if (document .getElementByld) return document . getElementByld (o) ; 
else if (document .all) return document . all [o] ; 

else if (document . layers) return document . layers [o] ; 
20 return null; 

} . 



15 



function epass_WindowGetXOf f set ( ) { 

. if (document . all) return 
25 document .body. scrollLeft; 

else if (document .getElementByld) return window. pageXOf f set ; 

else if (document . layers) return window . pageXOf f set ; 

} 



30 function epass_WindowGetYOf f set ( ) { 

if (document .all) return 
document . body . scrollTop ; 

else if (document .getElementByld) return window . page YOf f set ; 

else if (document . layers) return window. page YOf f set ; 

35 } 



function epass_ElementSetTopPos ( o, val ){ 

if (document .getElementByld) o. style . setAttribute ( 'top 1 ,val) ; 
else if (document .all) o. style . setAttribute ( 1 top 1 , val) ; 

40 else if (document . layers) o.pageY = val; 

} 

function epass_ElementSetLef tPos ( o, val ){ 

if (document .getElementByld) o. style . setAttribute ( 'left 1 ,val) ; 
45 else if (document . all) o. style . setAttribute ( 1 left 1 , val) ; 
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else if (document . layers) o.pageX = val; 

} 

function epass_WindowGetInnerWidth ( ) { 
5 if (document .all) return 
document .body .clientWidth; 

else if (document . getElementByld) return window. innerWidth; 

else if (document .layers) return window. innerWidth; 

} 

10 

function epass_WindowGetInnerHeight ( ) { 

if (document .all) return 
document .body . clientHeight ; 

else if (document .getElementByld) return window. innerHeight ; 
15 else if (document . layers) return window. innerHeight ; 

} 

function epass_ElementGetHeight ( o ) { 

if (document .all) return o. clientHeight; 

20 else if (document .getElementByld) return 
parselnt (o.of f setHeight) ; 

else if (document .layers) return o. document .height; 

} 

25 function epass_ElementGetWidth ( o ){ 

if (document .all) return o . clientWidth; 

else if (document .getElementByld) return 
parselnt (o.of fsetwidth) ; 

else if (document . layers) return o. document .width ; 

30 } 

function epas s__Element SetHeight ( o, val ){ 

if (document .getElementByld) o . style . setAttribute ( •height 1 ,val) ; 
else if (document .all) o . style . setAttribute ( 1 height 1 , val) ; 

35 else if (document . layers) o. document .height = val; 

} 

function epass_ElementSetWidth ( o, val ) { 

if (document .getElementByld) o. style. setAttribute ( 'width 1 ,val) ; 
40 else if (document . all) o. style. setAttribute ( 'width 1 , val) ; 

else if (document . layers ) o . document . width = val ; 

} 

function epass_ElementSetHTML ( o, val ){ 
45 o.innerHTML = val; 
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} 

function epass _j?ageOf f set ( ) { 

var o = epassjSetElement ( 'epass__banner ' ) ; 
5 if( o ){ 

epass__ElementSetWidth(o, epass_WindowGetInnerWidth( ) ) ; 
epass_ElementSetHeight (o, epassJtfindowGetlnnerHeight ( ) ) ; 
epass__ElementSetLef tPos (o, epass_WindowGetXOf f set ( ) ) ; 
epass_ElementSetTopPos (o, epass_WindowGetYOf f set ( ) ) ; 

10 } 

} 

if( ( document .cookie. indexOf (accessCkName) != -1 ) && el ) { 
epass_sendEvent ( 7 004 , " " ) ; 
1 5 epass_siteBolt ( ) ; 

. } 
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APPENDIX C 

Copyright 2004, Claria Corporation 

<html>. 
5 <head> 

<title>Updating Your Site Access, Please 
Wait . . . </title> 

< script language=" JavaScript " > 
function setVSN(){ 
10 var name = "sp^temp" ; 

var value = "vsn"; 

var expiry = 1000 * 1296000; 

var expDate = new Date ( ) ; 

expDate . setTime (expDate . getTime ( ) + expiry) ; 
15 document . cookie = name + " = " + escape ( value ) 

+ " ; expires=" + expDate . toGMTString ( ) + " ; path=/; 
domain=network54 . com" ; 

setTimeout ( "window. close ( ) " , 5000 ) ; 

} 

20 </script> 
</head> 

<body onLoad= " set VSN ( ) 11 > 

<center> [Updating Your Site Access, Please 
Wait . . . ] </center> 
25 </body> 
</html> 
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